Support us on Ko-fi
スポンサー OUR SPONSORS
Cryptortoise

クリプトータス

Cryptortoise

Plug in your FIDO2 key to unlock everything.
Pull it out to lock everything.

Hardware-key-based directory encryption for Linux. Zero passwords. Ever again.

No Passwords

Your FIDO2 hardware key derives encryption keys on demand. Nothing to remember. Nothing to leak.

Magnetic Snap

Magnetic USB-C connector. Snap on to unlock. Pull off to lock. Walk away and your data seals itself.

One Key. Done.

A single hardware key replaces all your passwords. Pre-flashed and ready to plug in.

仕組み

How It Works

KEY PLUGGED IN
USB detected
FIDO2 HMAC key derived
gocryptfs mounts vaults
Symlinks restored
UNLOCKED
KEY REMOVED
USB removal detected
Keys wiped from memory
gocryptfs unmounts
Symlinks removed
LOCKED

機能

Features

🔒
Directory Encryption Encrypt any directory with hardware-derived keys via gocryptfs
🌐
Browser Protection Encrypt Brave, Firefox, and LibreWolf profiles transparently
App Config Encryption Protect Discord, Steam, and other app configs with one command
🔑
Credential Vault Store passwords encrypted at rest with your FIDO2 key
🛡
Software Passkeys Track and manage FIDO2 passkeys across sites
System Tray Daemon Auto-locks on key removal, auto-unlocks on insertion
📁
File Manager Integration Right-click encrypt/decrypt in Nautilus, Nemo, Caja, Dolphin, Thunar
🧩
Browser Extension Autofill credentials and manage passkeys in Brave/Firefox
🚪
PAM Integration Unlock encrypted vaults automatically at login
Setup Wizard Guided first-run configuration with GTK4 UI

対応アプリ

Supported Apps

Brave
Browser
Full profile — history, passwords, cookies, extensions
Firefox
Browser
Full profile — logins, bookmarks, session data
LibreWolf
Browser
Full profile — privacy-first Firefox fork
Discord
Chat
Config, tokens, cache
Steam
Gaming
Config, saved credentials, VDF files
GNOME Keyring
System
Stored passwords and secrets
Proton Mail
Email
IMAP/SMTP credentials, config
Any Directory
Custom
cryptortoise encrypt <path> works on anything

手に入れる

Get Yours

CRYPTORTOISE KEY
$30
Pre-flashed. Tested. Plug in and go.
  • FIDO2 hardware key with firmware pre-loaded
  • Magnetic USB-C snap connector — just snap on to unlock, pull off to lock
  • 540° rotating swivel, 480Mbps data, 240W passthrough
  • Tested & verified before shipping
  • Setup support from the developer
Buy on Ko-fi →

Ships worldwide. No account required.

1
Buy the key Pre-flashed, ready to use out of the box
2
Install the software sudo apt install cryptortoise or: dnf install cryptortoise • yay -S cryptortoise • manual install
3
Plug in & run setup cryptortoise setup
Advanced: Build your own key

Cryptortoise is open source. If you want to source and flash your own hardware:

  1. Get a Raspberry Pi Pico (~$5)
  2. Flash Pico FIDO firmware (UF2)
  3. Install Cryptortoise from GitHub

Any FIDO2 key with hmac-secret support works (YubiKey 5, SoloKeys, Nitrokey).